Your security tools might have missed this one. Gafgyt is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/gafgyt-sample-detected-sh4-df0f35be
#cybersecurity #threatintelligence #infosec
Your security tools might have missed this one. DarkComet is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/darkcomet-sample-detected-microsoft-exe-98108306
#cybersecurity #threatintelligence #infosec
Horizontal bar chart: top 10 malware families by hash count. AsyncRAT leads, followed by Lumma, Vidar, Rhadamanthys, Qakbot.
30 days of malware hash ingestion into our open threat DB. Top families:
AsyncRAT 395K · Lumma 155K · Vidar 137K · Rhadamanthys 100K · Qakbot 82K · DCRat 77K
AsyncRAT's dominance is expected — open-source, commodity. Lumma and Rhadamanthys climbing fast is the shift worth watching.
Horizontal bar chart: top 10 malware families by hash count. AsyncRAT leads, followed by Lumma, Vidar, Rhadamanthys, Qakbot.
30 days of malware hash ingestion into our open threat DB. Top families:
AsyncRAT 395K · Lumma 155K · Vidar 137K · Rhadamanthys 100K · Qakbot 82K · DCRat 77K
AsyncRAT's dominance is expected — open-source, commodity. Lumma and Rhadamanthys climbing fast is the shift worth watching.
Your security tools might have missed this one. Socks5Systemz is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/socks5systemz-sample-detected-file-b2d256a1
#cybersecurity #threatintelligence #infosec
The quiet lesson: there are 20+ bridge-minted yield tokens on Aave's collateral list right now. Each inherits the security of its issuer's bridge. Nobody maintains a public list of those bridges' audit status.
Full breakdown: threatchain.io/kelp-dao-292m-rseth-bridge-hack
Aave's reaction was correct — froze rsETH markets within hours. But the signal had already traveled.
Bloomberg reported $9B in aggregate outflows across 48 hours. The market didn't see "Kelp has a problem." It saw "any bridge-minted collateral could do this next."
The mechanics: 116,500 rsETH released from Kelp's LayerZero bridge without a matching lock on the source chain. 18% of total rsETH supply inflated in one afternoon. Attacker off-ramped within the hour.
The Kelp DAO bridge exploit wasn't a Kelp problem. It was an Aave problem dressed as a Kelp problem.
When Aave accepts a bridge-minted token as collateral, the bridge becomes the lender's weakest link — and Friday's incident was the live demonstration.
$292 Million Vanished in Hours. Then $9 Billion Ran for the Exit.
Kelp DAO lost 116,500 rsETH via a LayerZero bridge exploit. Aave froze rsETH markets; $9B fled.
Read: https://threatchain.io/kelp-dao-292m-rseth-bridge-hack
We got tired of paying $2K/month for threat intel lookups. So we built a free search engine — 6.9M malware hashes, 27K CVEs. No signup. threatchain.io
What's a security tool you rely on daily that nobody talks about? The ones that actually save your ass at 2am during an incident.
A client got breached last week. First thing we did: pulled the IOCs and ran them through a threat intel search. Caught the C2 domain in seconds. Free lookups at threatchain.io #threatintel.
Your security tools might have missed this one. ValleyRAT is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/valleyrat-sample-detected-35300f285f5b7a573b38e1efcd9230e2-exe-753e3923
#cybersecurity #threatintelligence #infosec
Your security tools might have missed this one. Gh0stRAT is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/gh0strat-sample-detected-lest-latest-0-12-4-exe-a4ac7e6a
#cybersecurity #threatintelligence #infosec
AI can triage 200 alerts in the time it takes you to read one. But it can't understand business context. The SOC analyst job isn't going away — it's evolving.
That 'free software' download just exfiltrated every password, cookie, and autofill entry on your machine in under 5 seconds.
Full analysis: threatchain.io/vidar-sample-detected-file-d6446f28
#cybersecurity #threatintelligence #infosec
For $58 on a hacking forum, anyone can buy full remote control of your computer. Camera, keyboard, files — everything.
Full analysis: threatchain.io/remcosrat-sample-detected-preinterest-exe-4a2bc726
#cybersecurity #threatintelligence #infosec
AI can triage 200 alerts in the time it takes you to read one. But it can't understand business context. The SOC analyst job isn't going away — it's evolving.
Your security tools might have missed this one. DattoRMM is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/dattormm-sample-detected-trueview-exe-f58cb609
#cybersecurity #threatintelligence #infosec
Your security tools might have missed this one. SantaStealer is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/santastealer-sample-detected-file-44bf32bd
#cybersecurity #threatintelligence #infosec
A client got breached last week. First thing we did: pulled the IOCs and ran them through a threat intel search. Caught the C2 domain in seconds. Free lookups at threatchain.io #threatintel.
Your security tools might have missed this one. DiscordRAT is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/discordrat-sample-detected-redtiger-tools-main-2-0-exe-dbdeed30
#cybersecurity #threatintelligence #infosec
Your security tools might have missed this one. Smoke Loader is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/smoke-loader-sample-detected-file-54731e0a
#cybersecurity #threatintelligence #infosec
That one CVE you deprioritized because CVSS said 6.5? Turns out there's a public exploit and it's being actively used. What CVE burned you this year?
Your security tools might have missed this one. RatonRAT is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/ratonrat-sample-detected-xxx-exe-decadae3
#cybersecurity #threatintelligence #infosec
You downloaded one file. In the background, it silently installed three more programs you never asked for.
Full analysis: threatchain.io/blog/offloader-sample-detected-file-6fb87b85
#cybersecurity #threatintelligence #infosec
Breach alert just fired. Clock is ticking. What's the FIRST thing you check? Genuinely curious how different teams handle the first 60 seconds.
Your security tools might have missed this one. SalatStealer is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/salatstealer-sample-detected-file-bc0caae0
#cybersecurity #threatintelligence #infosec
Your security tools might have missed this one. RustyStealer is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: threatchain.io/blog/rustystealer-sample-detected-file-f9ec3083
#cybersecurity #threatintelligence #infosec